The Scam Archive

Real examples, plainly explained. Search by scam, sender, domain, or phone number and learn the red flags before you click.

Browse all scamsReport a scam
Plain language
No jargon
Real screenshots
Not mockups
Shareable tips
Family-friendly

Search the Archive

Latest additions

Newest examples in the archive, with the screenshot from each report.

See full archive
UnknownMexicoGobierno de México

Fake Gobierno de Mexico marriage-certificate portal that asks for spouses' details and a bank transfer

A Spanish-language page at premiosentencias.sinfronteras[.]org[.]mx, on the path /wp-content/apps/web-1.php, titles itself "Acta de Matrimonio · Trámite Oficial" and uses Gobierno de México and Registro Civil branding, including "Portal oficial de trámites gubernamentales" and a "SITIO VERIFICADO" badge. It is not a Mexican government website. A four-step process lists personal data of the spouses, delivery format, payment by bank transfer, and confirmation. When captured, the form body still showed "Cargando formulario...". Analysis of the same page describes a request for both spouses' names, marriage date and state of registration. The payment screen itself was not reached. Completed payment was not established.

Read more
Part of Fake Government Civil Document Application Scam
UnknownPakistanPunjab

Fake Punjab DLIMS page promising a driving licence without a test and asking for CNIC uploads and JazzCash payment

A page at dlimspunjab[.]li titles itself "DLIMS PUNJAB GOVT" and "Driving Licence Management System", uses Punjab government branding and a "Powered by Dastak - Punjab" line, and is not run by the Punjab government. It promises online application with doorstep courier delivery and says no driving test is needed. The form asks for name, CNIC number, father's name, phone numbers, address, CNIC front and back uploads, a licence photo and a licence category, then shows a Pay Fee step with JazzCash or Easypaisa QR and TILL ID controls. Fee amounts in the capture were placeholder zeros and are not established.

Read more
Part of Fake Government Licence Application Scam
UnknownSportsChekFake Shop

Fake SportsChek Canada shop selling unbranded clothes at 74 to 87 percent off

A shop at summer-freturedoffers[.]shop uses Open Graph tags naming SportsChek-CA and a visible header unisexclothes-ca. It is not run by SportsChek. Featured jackets and sweatshirts show advertised discounts of about 74% to 87% off, with sale prices such as CA$26.93 to CA$43.32 next to a crossed-out CA$200.00 comparison price. The shop offers a login, a cart and an email sign-up. Shared shop code links it to a multi-brand lookalike retail storefront network.

Read more
Part of Fake Branded Online Store Scam
UnknownCostcoFake Shop

Fake Costco Canada shop selling appliances and furniture for around CA$50

A shop at tgfullcj[.]shop copies the Costco Wholesale website, with the Costco logo, blue menu bar, a "Member-Only Savings" flyer and "Online Only Finds" banners, and says it delivers across Canada. It is not run by Costco. Large appliances, furniture and tools are mostly priced between about CA$40 and CA$55, next to crossed-out prices up to six times higher. Examples include an LG 27 inch gas dryer for CA$44.95 and a ZLINE professional gas range for CA$48.27. The shop offers an account login, a cart, an email sign-up and a "Trusted Store, Certified Secure" badge.

Read more
Part of Fake Branded Online Store Scam
UnknownInstagramAccount Suspended

Fake Instagram suspended account recovery page on GitHub Pages that asks for your password and personal details

A page titled "Insta Recovery" at instagram-id-disabled.github[.]io/suspended/paid-recover shows the Instagram logo and the heading "Disable Suspended Recovery". It is aimed at people whose Instagram account has been, or is said to have been, suspended or disabled. The form asks for your full name, your Instagram login ID, your password, your date of birth, your gender and a contact email, then shows a "Proceed" button. It is not run by Instagram or Meta. It is hosted on GitHub Pages, a free website service. Submitting a valid password to an untrusted page could put the account at risk, but the submission destination and any resulting account access were not established.

Read more
Part of Facebook Page Violation Scam
UnknownTrendyolPhishing

Fake Trendyol login page asking for a username, phone or email, and a password

An English-language page at trendyolvip[.]shop uses the Trendyol name and orange branding and shows a "Welcome" card asking for a username, phone or email and a password, with Sign In and Register buttons, a Remember me box, and links labelled Terms and Conditions and Privacy Policy. It is not Trendyol's website. Whether anyone submitted credentials, and where they would be sent, were not established. The delivery channel is unknown. A capture associated with Myanmar is not treated as proof of targeting.

Read more
Part of Fake Branded Account Login Scam
UnknownPhilippinesTask Scam

Fake phpshowwork shop offering Filipino women paid e-commerce tasks with daily GCash payouts

A page at phpshowwork[.]shop advertises an "Online Part-Time: E-commerce Tesk Assistant" role aimed at Filipino women aged 25 and over, for 1 to 3 hours a day. It says funds can be withdrawn daily to GCash, PayMaya or bank transfer, and tells applicants to chat with a coordinator to sign up. The page also says it is for recruitment and application only, not an investment program, and that applicants may be asked to confirm age and location. No fee or deposit step was captured. The page is not a confirmed employer.

Read more
Part of Fake Online Task Job Scam
UnknownNigeriaOPay

Fake OPay ₦50,000 NERSI relief page promising an instant cash payment

A page at gifmi[.]site/opay-50k-relief uses OPay branding and promises ₦50,000 in "NERSI Relief Support Funds". It says "POWERED BY: NERSI & FG" and asks visitors to accept the money, complete a 30-second registration and confirm their details. A deadline and a Facebook-style comment section make the offer look urgent and popular. The page was observed on November 6, 2026, targeting Nigeria. The captured screen does not establish any genuine OPay or government backing, and the steps after the accept button were not recorded.

Read more
Part of Share-to-Unlock Prize Scam
UnknownVietnamFacebook

Fake Facebook typo site with a Vietnamese sensitive-content login prompt

A Vietnamese-language page at mfacebock[.]com[.]vn uses a Facebook logo and shows a modal over a blurred post. The modal heading reads "Nội dung nhạy cảm" (sensitive content), the supporting line reads "Bạn cần đăng nhập để xác minh" (you need to log in to verify), and the button is labelled "Xác minh" (verify). Password fields are not on the captured frame. The captured page title and path use an urgent missing-person style lure. The page is not Facebook. Whether anyone continued to a password step, and where any login details would be sent, were not established.

Read more
Part of Facebook Page Violation Scam

Latest WatchOut alerts

Recent warnings. When an alert matches a scam record or a domain already in the archive, a link to that record is included.

All alerts

Browse by category

Categories with examples in the archive, and how many records each one has.

View all
A

Advance Fee Fraud

Scammers promise a large payout, inheritance, contract transfer, or released funds, then demand fees, bank details, or identity documents before the money can be received.

4 scams

C

Charity / Disaster Relief

Fake charities exploiting disasters or tragedies to solicit fraudulent donations.

1 scam

C

Credential Harvesting

Fake websites or forms designed to steal login details, MFA codes, or personal data.

5 scams

C

Crypto Wallet / Exchange Impersonation

Fake crypto wallets, exchanges, or airdrops designed to steal private keys or funds.

3 scams

E

Extortion / Sextortion

Threats to expose sensitive or fake compromising information unless paid.

2 scams

I

Impersonation / Social Media

Accounts or pages impersonating individuals or brands to defraud followers.

6 scams

I

Investment / Crypto

Fraudulent investments or crypto scams promising guaranteed returns or exclusive offers.

4 scams

J

Job / Work-From-Home

Fake job offers requiring upfront fees, equipment purchases, or acting as a money mule.

6 scams

L

Lottery / Prize

Fraudulent prize claims requiring fees or sensitive info to claim winnings.

2 scams

M

Malware / Attachment

Emails or downloads containing malicious attachments or links to malware.

3 scams

M

Marketplace / Classifieds

Fake listings, rental scams, or overpayment schemes on marketplaces and classifieds.

4 scams

P

Phishing

Attempts to trick victims into revealing credentials or sensitive info by impersonating trusted services.

19 scams

R

Refund / Invoice Bait

Fake invoices or 'refund' notices that trick victims into calling scammers or installing remote-access tools.

4 scams

R

Romance / Dating

Emotional manipulation via dating platforms leading to requests for money or gifts.

1 scam

S

Shipping / Delivery

Fake delivery notifications tricking victims into clicking malicious links or paying fees.

3 scams

S

Smishing (SMS Phishing)

Phishing attempts delivered by text message linking to fake sites or requesting responses.

2 scams

T

Tech Support / Remote Access

Scammers claim there is a virus or issue and request remote access or payment for fake fixes.

1 scam

Quick tip: Pause before you pay

Unexpected refunds, gift-card demands, and urgent invoices are classic pressure tactics. Verify using a trusted phone number or website you already know, not the link you were sent.

See common red flags

About the Archive

Who we are, how we verify examples, and how you can help.

Report a Scam

Send screenshots or details. Your tip could protect someone else.

Support Our Work

Donations to the Cybersecurity Reach Foundation keep this archive free.